b16135037cc64ecb772f836a0f4f4ffe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b16135037cc64ecb772f836a0f4f4ffe_JaffaCakes118
Size

393KB
MD5

b16135037cc64ecb772f836a0f4f4ffe
SHA1

41e7aaac92e8415a581ad0e71170dcfdf918cbbc
SHA256

3176ba0903382db8733c068feadef71e7ad8f41b7a96b25b85ae977756409ae3
SHA512

5725830522faaf741fcf73b2b2bed95d6ba8cf40436e000050e16059bdfdfdf4c195a1c8a64457f3c007b3ff426add915a836b6872adb8d64ade533069a70500
SSDEEP

12288:H+yJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDDIqxF:eyJOfWwWGzUrbOYDICF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b16135037cc64ecb772f836a0f4f4ffe_JaffaCakes118

Files

b16135037cc64ecb772f836a0f4f4ffe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ad9f0b72cd5b63e405a587f4582dab9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
lstrlenA
GetACP
FreeEnvironmentStringsA
CreateMutexA
TlsGetValue
HeapDestroy
ExitProcess
GlobalUnlock
HeapCreate
LocalFree
FindAtomA
FindClose
CloseHandle
MapViewOfFile
SetupComm
GetModuleHandleA
Sleep
LoadLibraryExW

user32

GetFocus
DrawEdge
GetIconInfo
DefWindowProcW
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton
MessageBoxA

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ